Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0aed97d-7073-4206-b05c-18a84d3f256d/2398f7d1-3e27-378d-8483-861bb5affc2a.roa
File:                     2398f7d1-3e27-378d-8483-861bb5affc2a.roa (raw, json)
Hash identifier:          ySB5Mut4lAmdmm6cPzef+rHT/qfMcBLC7OdHCQs2No0=
Subject key identifier:   47:05:70:07:99:C1:E9:AB:F6:8C:44:ED:21:89:3E:D1:23:F1:03:90
Certificate issuer:       /CN=c0aed97d-7073-4206-b05c-18a84d3f256d
Certificate serial:       010D0C9F432858484D758ED0F75EECC6B35A2380
Authority key identifier: 89:7F:03:30:67:E4:3D:E8:6D:FC:A9:72:8E:4B:37:8F:AF:87:0C:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0aed97d-7073-4206-b05c-18a84d3f256d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0aed97d-7073-4206-b05c-18a84d3f256d/2398f7d1-3e27-378d-8483-861bb5affc2a.roa
Signing time:             Mon 23 Dec 2024 14:00:51 +0000
ROA not before:           Mon 23 Dec 2024 14:00:51 +0000
ROA not after:            Sun 23 Mar 2025 13:00:51 +0000
asID:                     209242
IP address blocks:        74.115.51.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4d:75:8e:d0:f7:5e:ec:c6:b3:5a:23:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0aed97d-7073-4206-b05c-18a84d3f256d
        Validity
            Not Before: Dec 23 14:00:51 2024 GMT
            Not After : Mar 23 13:00:51 2025 GMT
        Subject: CN=f4a19483-aafc-442b-927b-15ba3d9dda1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:26:8c:26:2d:34:d3:99:e2:00:fa:40:58:5e:
                    64:a5:e2:61:5f:f1:28:62:c7:52:9c:26:d7:fb:45:
                    85:a7:76:d5:06:5c:2e:53:ee:15:e0:56:99:54:f3:
                    8f:38:54:15:e7:c4:8a:dc:0b:72:22:b9:50:74:c0:
                    39:86:02:55:91:e3:55:5a:94:84:a2:71:89:e2:f8:
                    b5:45:31:70:86:60:b7:22:33:82:a2:82:d2:be:68:
                    3e:23:57:69:d7:04:34:f6:17:5a:28:89:e3:76:05:
                    0e:c9:eb:bf:76:67:60:0d:92:13:96:dc:54:30:3d:
                    21:eb:6e:18:06:79:61:14:2e:b9:b8:99:5f:f9:24:
                    37:58:c4:cd:f8:2c:c9:55:bc:9c:29:19:5b:4b:c1:
                    a5:11:65:e5:a3:ca:d6:9c:df:6b:fc:8b:95:a5:81:
                    c7:be:dd:01:ef:ad:06:ad:ff:06:5c:5c:0d:83:48:
                    1e:18:de:a2:67:e1:27:49:0b:4d:31:d0:34:3a:c8:
                    0b:e2:7c:17:a5:1c:07:ed:3e:de:c9:9a:af:78:0f:
                    7d:90:46:5f:cf:32:6b:20:34:0e:91:73:a5:ab:da:
                    a6:ee:78:21:7a:3a:31:97:8b:01:e2:b6:ad:01:5e:
                    36:61:47:95:c7:4e:2a:6f:c8:a4:ec:24:ad:a7:56:
                    f1:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:05:70:07:99:C1:E9:AB:F6:8C:44:ED:21:89:3E:D1:23:F1:03:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0aed97d-7073-4206-b05c-18a84d3f256d/2398f7d1-3e27-378d-8483-861bb5affc2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0aed97d-7073-4206-b05c-18a84d3f256d/c0aed97d-7073-4206-b05c-18a84d3f256d.crl

            X509v3 Authority Key Identifier:
                keyid:89:7F:03:30:67:E4:3D:E8:6D:FC:A9:72:8E:4B:37:8F:AF:87:0C:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0aed97d-7073-4206-b05c-18a84d3f256d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.115.51.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:d8:0f:c5:38:db:6c:87:2c:9f:2e:c7:30:f7:5d:10:ce:9e:
         3f:d8:81:1a:79:da:bd:44:e5:56:e5:aa:ec:55:5b:5a:88:96:
         a6:0b:a2:48:00:d2:4a:85:71:3d:b3:da:7b:ad:69:48:0b:7b:
         57:ef:02:e0:bf:c7:94:58:c6:74:fe:66:24:30:89:50:16:2a:
         80:65:d9:42:73:15:b4:56:d6:2c:17:9e:5f:a1:be:d6:27:8a:
         d9:c5:ed:4b:9c:94:58:a0:5b:6e:a5:96:31:9d:cd:fd:04:f0:
         97:2b:23:ca:a4:26:bb:12:b9:2c:6e:f4:a0:c9:a4:f3:51:30:
         8b:87:51:67:98:6a:92:3e:ee:27:17:6d:c6:89:c7:9e:0b:7e:
         b3:a5:e2:77:a7:50:40:21:41:16:59:e0:b2:26:bf:ba:3a:53:
         8c:98:de:50:e6:5f:1c:6f:57:6a:b6:dd:c3:2b:2a:0d:2e:97:
         48:c7:d4:d4:35:c9:78:1f:e4:a6:b0:73:7b:3d:ed:e5:69:0b:
         db:6b:ed:68:4d:30:e4:f6:c2:64:83:b5:f0:3c:d9:04:d8:fd:
         db:3b:08:68:ec:ec:d6:04:ff:c6:8f:b8:50:a0:25:4a:7e:8f:
         69:11:bd:b1:e3:9f:dc:57:fa:2b:d0:08:c9:5f:bd:e1:3a:0e:
         b4:1c:de:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:12:05 2025 by rpki-client